Last updated October 8, 2026

Privacy

Spaces stores your site copy, settings, gallery structure, chosen address, optimized photograph variants, and a hash of the recovery key used to manage your site. There are no accounts or sign-in.

Photographs and metadata

Uploaded originals are processed in memory and are not retained. Only optimized WebP display and thumbnail variants are stored. Embedded metadata is removed from those files. GPS and location fields are discarded; other readable metadata may be stored separately for the site owner.

Protected sites

Visitor passwords are salted and hashed. Short-lived signed cookies remember successful visitor access on a single site.

Processors and retention

Cloudflare hosts the application, database, image processing and storage. OpenAI transmits plugin requests and selected files. Site data remains until removed. Temporary attachment previews expire after one hour and are cleaned up hourly. Site creation is rate limited using a keyed hash of the requesting IP address; raw IP addresses are not stored by that limiter.

Editing and your choices

After publishing, Spaces gives you a recovery key. Save it so you can edit the site later. Spaces stores only a hash of the key. You can unpublish without deleting saved content. For access, correction, or deletion requests, contact support@spaces.pics.